CVE-2017-14111

HIGH 7.2CVE-2017-14111 · Published 17/11/2017 · updated 17/06/2026

In short

CVE-2017-14111 is a HIGH (CVSS 7.2) vulnerability affecting intellispace cardiovascular (philips), xcelera (philips).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
intellispace cardiovascular philips	`≤ 2.3.0`	No fix yet
xcelera philips	`≤ r4.1l1`	No fix yet

Description

The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an attacker to use credentials to access the application, or other user entitlements.

References

securityfocus.com/bid/101850 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSMA-17-318-01 · Issue Tracking
usa.philips.com/healthcare/about/customer-support/product-security · Issue Tracking

More vulnerabilities in intellispace cardiovascular

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intellispace cardiovascular

philips

≤ 2.3.0

No fix yet

xcelera

philips

≤ r4.1l1

No fix yet

More vulnerabilities in intellispace cardiovascular

See all →